Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-10966

Опубликовано: 07 нояб. 2025
Источник: ubuntu
Приоритет: low
CVSS3: 4.3

Описание

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.

РелизСтатусПримечание
devel

not-affected

code not compiled
esm-infra-legacy/trusty

not-affected

code not compiled
esm-infra-legacy/xenial

not-affected

code not compiled
esm-infra/bionic

not-affected

code not compiled
esm-infra/focal

not-affected

code not compiled
esm-infra/xenial

not-affected

code not compiled
jammy

not-affected

code not compiled
noble

not-affected

code not compiled
plucky

not-affected

code not compiled
questing

not-affected

code not compiled

Показывать по

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.9
redhat
около 1 года назад

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.

CVSS3: 4.3
nvd
около 1 года назад

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.

CVSS3: 6.8
msrc
11 месяцев назад

missing SFTP host verification with wolfSSH

CVSS3: 4.3
debian
около 1 года назад

curl's code for managing SSH connections when SFTP was done using the ...

CVSS3: 4.3
github
около 1 года назад

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.

4.3 Medium

CVSS3